Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/Y4LSXTRGutd6vFojxdh18WhxYc0.roa
File: Y4LSXTRGutd6vFojxdh18WhxYc0.roa (raw, json)
Hash identifier: r13kuOzVQWD9BKco8t5LXP0xQ6JZgjXF0Fv/RWBkuiM=
Subject key identifier: 63:82:D2:5D:34:46:BA:D7:7A:BC:5A:23:C5:D8:75:F1:68:71:61:CD
Certificate issuer: /CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Certificate serial: 01857155376304C3D3856B169D9FA659B1FA
Authority key identifier: 5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/Y4LSXTRGutd6vFojxdh18WhxYc0.roa
Signing time: Mon 02 Jan 2023 07:14:48 +0000
ROA not before: Mon 02 Jan 2023 07:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207647
IP address blocks: 87.239.9.0/24 maxlen: 24
87.239.8.0/24 maxlen: 24
87.239.8.0/21 maxlen: 21
87.239.10.0/24 maxlen: 24
87.239.12.0/24 maxlen: 24
87.239.15.0/24 maxlen: 24
87.239.14.0/24 maxlen: 24
87.239.13.0/24 maxlen: 24
2001:678:6a0::/48 maxlen: 48
2001:678:be4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:37:63:04:c3:d3:85:6b:16:9d:9f:a6:59:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Validity
Not Before: Jan 2 07:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6382d25d3446bad77abc5a23c5d875f1687161cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:18:26:8b:cf:57:64:89:eb:67:f8:94:db:
de:8a:71:87:af:ca:b5:fe:b8:70:98:c3:bf:5f:b9:
0e:5a:06:43:e7:f1:71:ca:15:aa:a5:a7:fd:70:69:
67:55:2d:4d:7f:39:7c:1f:08:1c:42:1f:f6:97:08:
15:c3:72:08:c2:5e:0f:5b:71:cc:82:52:b5:bb:81:
46:92:7d:4f:71:ef:e6:78:18:66:27:3a:8b:ee:07:
1f:d7:da:11:e9:7d:a9:84:86:e9:d2:dc:71:3b:68:
95:a8:74:46:0c:17:1a:3b:c4:6d:e4:c2:4f:57:5d:
f4:08:31:50:c5:dc:df:15:a2:89:18:f7:52:e2:bf:
34:e1:7c:e8:28:4c:2f:12:17:5d:94:c0:f0:06:b7:
38:b7:7d:2d:ac:49:c3:87:dd:57:62:07:05:5f:8a:
0d:0f:bc:2a:f1:45:54:fe:46:26:5d:7f:64:3c:a3:
f3:41:89:73:c0:09:29:28:ad:dd:0c:e3:87:27:c6:
86:36:78:94:52:5c:21:10:c6:09:ac:dd:3d:43:71:
2f:7d:bf:b5:31:8e:9c:c3:8d:48:70:85:73:73:fa:
d6:1b:cd:cf:ff:7d:5b:e2:cb:2c:11:f7:f1:f3:37:
fe:7f:d3:5d:48:21:f2:35:79:2a:85:f4:d7:4e:3d:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:82:D2:5D:34:46:BA:D7:7A:BC:5A:23:C5:D8:75:F1:68:71:61:CD
X509v3 Authority Key Identifier:
keyid:5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/Y4LSXTRGutd6vFojxdh18WhxYc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.8.0/21
IPv6:
2001:678:6a0::/48
2001:678:be4::/48
Signature Algorithm: sha256WithRSAEncryption
ad:77:33:0a:70:a1:da:a3:00:48:29:87:59:9d:ea:c8:8d:ce:
d2:e0:be:d1:28:98:6e:fc:d0:3b:92:05:0c:62:df:db:33:50:
f9:a4:57:d6:86:45:54:3d:14:4b:53:ff:14:12:82:a3:1c:8a:
cf:4a:52:b8:8a:98:28:6a:6d:33:d4:37:9d:df:c2:17:ea:9a:
70:38:c5:16:23:0a:ca:a6:4f:08:cc:fd:c4:48:c6:b9:50:27:
29:4d:61:e4:7d:2c:08:28:54:88:32:95:1d:38:ac:08:e1:46:
1e:60:15:ad:8d:0a:17:86:51:2d:a0:de:12:1c:41:47:17:7f:
51:db:a8:2d:a4:c6:b9:56:91:c0:0d:32:f9:d2:fa:8b:d7:b1:
03:f6:7e:21:a6:ad:a9:9a:09:f5:1b:a5:d0:59:2e:96:ca:55:
f5:db:5a:7b:6a:3f:e3:c9:34:23:d9:11:f5:55:50:f3:8c:a8:
c2:36:a7:c4:0d:a4:f9:5b:4b:d3:30:b3:1f:e8:bd:95:48:a4:
61:19:5d:de:02:1c:df:e1:ac:a0:59:fa:67:aa:18:eb:21:92:
06:ff:41:17:1b:a8:00:22:33:45:a2:c4:49:04:b1:59:0e:7f:
e6:35:a2:2d:3d:04:59:a4:b9:64:5f:5f:ab:b3:8f:0a:b1:d9:
d6:15:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:10 2024 by rpki-client on console-ams.rpki-client.org